Medium severity5.3GHSA Advisory· Published May 14, 2024· Updated Apr 15, 2026

CVE-2024-34914

Description

php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing algorithm for its remember_key value. This allows attackers to bruteforce to bruteforce the remember_key value to gain access to accounts that have checked "remember me" when logging in.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
php-censor/php-censorPackagist	>= 2.1.0, < 2.1.5	2.1.5
php-censor/php-censorPackagist	< 2.0.13	2.0.13

Affected products

PHP Censor/PHP CensorGHSA
Range: < 2.0.13
ghsa-coords
pkg:composer/php-censor/php-censor
Range: >= 2.1.0, < 2.1.5

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-fqw7-839j-hvxjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-34914ghsaADVISORY
chmod744.super.site/redacted-vulnerabilitynvdWEB
github.com/php-censor/php-censor/commit/7b011d1b60f543e6ed814315a285cc80074d12e5ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000